---
title: Token Vault changelog
description: Subscribe to get automatic updates:
component: sdks
version: latest
page_id: sdks:release-notes:changelogs/changelog_token_vault
canonical_url: https://docs.pingidentity.com/sdks/latest/release-notes/changelogs/changelog_token_vault.html
revdate: Wed, 9 Aug 2023 14:56:17 +0100
keywords: ["Features", "Source Code", "SDK", "Token Vault"]
section_ids:
  forgerock_token_vault_4_2_2: Token Vault 4.2.2
  forgerock_token_vault_4_2_1: Token Vault 4.2.1
  forgerock_token_vault_4_2_0: Token Vault 4.2.0
  forgerock_token_vault_4_1_2: Token Vault 4.1.2
---

# Token Vault changelog

Subscribe to get automatic updates:

* [icon: rss-square, set=fa][Ping (ForgeRock) SDKs Changelog RSS feed](developer_experience_changelog_rss.xml)

* [icon: square-envelope, set=fa][Ping (ForgeRock) SDKs Changelog email notifications](https://backstage.forgerock.com/account/notifications/settings)

## Token Vault 4.2.2

May 6, 2026 `patch`

**Updated**

* Updated dependency on Ping (ForgeRock) SDK for JavaScript to version 4.9.1.

## Token Vault 4.2.1

March 11, 2026 `patch`

**Updated**

* Updated `evaluateUrlForInterception` to prevent URL allowlist bypass using query parameter injections.

## Token Vault 4.2.0

September 11, 2023 `minor`

**Added**

* Added a requirement to declare a list of URLs in the Token Vault Proxy configuration. These generate an allowlist of origins to which the proxy can forward requests.

## Token Vault 4.1.2

July 24, 2023 `major`

**Added**

* Initial release of Token Vault.

***